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2a )□ This action is FINAL. 2b)^ This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
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DETAILED ACTION 



This office action is in response to amendment and remarks filed on April 29, 2010. The 
amendments filed on April 29, 2010 have been entered and made of record. Claims 33-51 and 
53-62 are pending. 



Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on April 29, 2010 has been entered. 

Response to Arguments 

Applicant's arguments with respect to claims 33-51 and 53-62 have been considered but 
are moot in view of the new ground(s) of rejection. 

Allowable Subject Matter 

Claims 34, 46, 50 and 55 are objected to as being dependent upon a rejected base claim, 
but would be allowable if rewritten in independent form including all of the limitations of the 
base claim and any intervening claims. 
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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1(2) of such treaty in the English language. 

Claims 33, 35-45, 47-49, 51, 53-54 and 56-62 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Alie (U. S. Publication No.: 2003/0055738). 
1 . Regarding Claim 33 Alie teaches and describes a method of authenticating a data 
processing terminal of a user for granting the data processing terminal access to selected services 
provided by a data processing system, the user being provided with an authenticatable mobile 
communication terminal adapted to be used in a mobile communication network, comprising: 
performing a first, SIM-based authentication of the user's data processing terminal in the data 
processing system at an authentication data processing server, said performing the SIM-based 
authentication comprising operatively associating with the user's data processing terminal a first 
subscriber identity module issued to the data processing terminal user; having the user's mobile 
communication terminal authenticated in the mobile communication network; and conditioning 
the authentication of the user's data processing terminal in the data processing system to a second 
authentication, said second authentication being based on identification information provided to 
the user at the mobile communication terminal through the mobile communication network using 
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a second subscriber identity module ([0058-0068 and 0070-0096]). 

2. Regarding Claim 44 Alie teaches and describes a method by which a data processing 
terminal in a data processing system is authenticated in order to be granted access to selected 
services provided by the data processing system, the method comprising: interacting with a first 
user's subscriber identity module (SIM) operatively associated with the data processing terminal, 
and with an authentication data processing server in the data processing system, for performing a 
SIM-based authentication of the user's data processing terminal; acquiring personal identification 
information provided to the user at a user's mobile communication terminal for second 
authentication, wherein the second authentication is through a mobile communication network 
using a second subscriber identity module; and sending said personal identification information 
to the authentication data processing server for completing the authentication of the data 
processing terminal ([0058-0068 and 0070-0096]). 

3. Regarding Claim 48 Alie teaches and describes a method by which an authentication data 
processing server authenticates a user's data processing terminal in a data processing system in 
order to grant the data processing terminal access to selected services provided by the data 
processing system, comprising: receiving a request of authentication of the data processing 
terminal, the data processing terminal having operatively associated therewith a first subscriber 
identity module; performing a SIM-based authentication of the data processing terminal based on 
data associated with the first subscriber identity module; providing the user with first personal 
identification information by exploiting a user's mobile communication terminal authenticated in 
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a mobile communication network; and conditioning the authentication of the user's data 
processing terminal to a prescribed correspondence between the first personal identification 
information provided to the user and second personal identification information received from 
the user's data processing terminal through the mobile communication network using a second 
subscriber identity module in reply to the provision of the first personal identification 
information ([0058-0068 and 0070-0096]). 

4. Regarding Claim 53 Alie teaches and describes in a data processing system, a system for 
authenticating a data processing terminal of a user so as to grant the data processing terminal 
access to selected services provided by the data processing system, the user having an 
authenticatable mobile communication terminal adapted to be used in a mobile communication 
network, comprising: a first subscriber identity module operatively associatable with the data 
processing terminal; and an authentication data processing server adapted to carry out a first 
authentication step based on the first subscriber identity module; the authentication data 
processing server being further adapted to carry out a second authentication process based on 
identification information provided to the user at the mobile communication terminal through the 
mobile communication network using a second subscriber identity module ([0058-0068, and 
0070-0096]). 

5. Regarding Claim 60 Alie teaches and describes an authentication kit for authenticating a 
user's data processing terminal in a data processing system in order to grant the data processing 
terminal access to selected services provided by the data processing system, comprising: a first 
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subscriber identity module; a computer peripheral device having associated therewith the first 
subscriber identity module and operatively associatable with the user's data processing terminal; 
and a second subscriber identity module operatively associated with a user's mobile 
communication terminal for allowing connection thereof to a mobile communication network 
([0058-0068 and 0070-0096]). 

6. Regarding Claim 62 Alie teaches and describes an authentication kit for authenticating a 
user's data processing terminal in a data processing system in order to grant the data processing 
terminal access to selected services provided by the data processing system, comprising: a first 
subscriber identity module; a computer peripheral device having associated therewith the first 
subscriber identity module and operatively associatable with the user's data processing terminal; 
a second subscriber identity module operatively associated with a user's mobile communication 
terminal for allowing connection thereof to a mobile communication network; and the computer 
program product of claim 47 or 5 1 ([0058-0068 and 0070-0096]). 

4. Claims 35-43, 45, 47, 49, 51, 54, 56-59 and 61 are rejected applied as above rejecting 
Claims 33, 44, 48, 53, and 60. Furthermore, Alie teaches and describes data dependent 
scrambler, wherein: 

As per Claim 35, comprising having the user entering the second password through the 
data processing terminal ([0010-0018]). 

As per Claim 36, the second password is entered automatically upon receipt of the first 
password at the user's mobile communication terminal ([0070-0076]). 
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As per Claim 37, said first password is usable a limited number of times, or one time only 
([0070-0076]). 

As per Claim 38, comprising issuing to the user a second subscriber identity module 
adapted to be used in the user's mobile communication terminal for authentication thereof in the 
mobile communication network ([0010-0018]). 

As per Claim 39, the second subscriber identity module has a fixed, one-to-one 
relationship with the first subscriber identity module ([0070-0076]). 

As per Claim 40, the first subscriber identity module is associated with an identifier of 
the second subscriber identity module, or a mobile communication terminal number ([0070- 
0096]). 

As per Claim 41, said identification information is sent to the user's mobile 
communication terminal by way of a short message service message ([0070-0096]). 

As per Claim 42, said first subscriber identity module is of a type adopted in mobile 
communication networks for authenticating mobile communication terminals ([0010-0018]). 

As per Claim 43, said performing the first, SIM-based authentication of the data 
processing terminal comprises having the first subscriber identity module authenticated by an 
authentication server of the data processing system, the authentication server acting substantially 
as an authentication center of a mobile communication network operator ([0070-0096]). 

As per Claim 45, in which the first subscriber identity module is of a type adopted in 
mobile communication networks for authenticating mobile communication terminals ([0010- 
0018]). 
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As per Claim 47, a computer-readable medium encoded with a computer program 
product directly loadable into a working memory of a data processing terminal, the computer 
program product comprising software code portion capable of performing, when executed, the 
method according to claim 44 ([0054-0068]). 

As per Claim 49, the first subscriber identity module is of a type adopted in mobile 
communication networks for authenticating mobile communication terminals, the authentication 
data processing server acting substantially as an authentication center of a mobile 
communication network operator ([0054-0068]). 

As per Claim 5 1, a computer-readable medium encoded with a computer program 
product directly loadable into a working memory of an authentication data processing system, 
the computer program product comprising software code portion capable of performing, when 
executed, the method according to claim 48 ([0054-0068]). 

As per Claim 54, the first subscriber identity module is of a type adopted in mobile 
communication networks for authenticating mobile communication terminals ([0010-0018]). 

As per Claim 56, the second subscriber identity module is in a fixed, one-to-one 
relationship with the first subscriber identity module ([0070-0076]). 

As per Claim 57, the second subscriber identity module is associated with an identifier of 
the second subscriber identity module, particularly a mobile communication terminal number 
([0070-0076]). 

As per Claim 58, said first subscriber identity module is associated with a device 
connectable to the computer through a computer peripheral connection port ([0010-0018]). 
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As per Claim 59, said mobile communication network is one among a GSM, a GPRS, 
and a UMTS network ([0070-0096]). 

As per Claim 61, the first subscriber identity module is of a type adopted in mobile 
communication networks for authenticating mobile communication terminals ([0010-0018]). 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SYED ZIA whose telephone number is (571)272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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May 27, 2010 
/Syed Zia/ 

Primary Examiner, Art Unit 243 1 



